Description

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.

Related CPE's

a

adobe

commerce

6

a

adobe

magento_open_source

6

References

https://helpx.adobe.com/security/products/magento/apsb23-17.html

Release NotesVendor Advisory

https://helpx.adobe.com/security/products/magento/apsb23-17.html

Release NotesVendor Advisory

Weaknesses

[email protected]

Secondary
CWE-863

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-03-27T19:15:10.923Z

3 years ago

Last modified

2024-11-21T06:44:24.210Z

1 year ago